This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
File: 34352e3233362e37342e302f32332d3234203d3e20323731343738.roa (raw, json)
Hash identifier: C/d4MdTlqMUoqMU1P+U95faG85CHNnsPgQg4TYWnhq0=
Subject key identifier: 83:95:3B:A0:D0:9E:DE:90:4E:B4:04:D1:86:A6:60:70:06:A9:E3:38
Certificate issuer: /CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Certificate serial: 7DB2FD36939A852C95E021C7AF345F953C6900E5
Authority key identifier: E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
Signing time: Fri 14 Nov 2025 15:54:01 +0000
ROA not before: Fri 14 Nov 2025 15:49:01 +0000
ROA not after: Fri 13 Nov 2026 15:54:01 +0000
asID: 271478
IP address blocks: 45.236.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.mft
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 07 Dec 2025 15:19:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b2:fd:36:93:9a:85:2c:95:e0:21:c7:af:34:5f:95:3c:69:00:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400
Validity
Not Before: Nov 14 15:49:01 2025 GMT
Not After : Nov 13 15:54:01 2026 GMT
Subject: CN=83953BA0D09EDE904EB404D186A6607006A9E338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:99:5f:3c:ac:cf:fd:01:b1:de:e9:e0:0a:7f:
e0:3f:f2:92:47:63:77:83:8a:e8:a4:9d:84:be:5d:
64:54:85:6c:e0:4b:4b:53:02:0c:2b:5f:59:4a:48:
73:fc:4f:f7:07:35:93:d3:c0:2e:26:dc:bf:9a:11:
9e:0c:d3:b9:1e:8b:ac:28:06:6e:10:9f:3a:a1:a4:
b5:ea:33:9d:f8:09:f9:5d:35:7b:c3:1f:ca:ae:f0:
72:1b:af:89:c9:af:26:42:02:52:35:ca:3f:8f:53:
16:6c:79:24:a5:3c:f1:e7:71:20:08:6a:87:a4:9b:
36:52:29:d6:ac:31:2b:54:b9:8d:a6:c4:7e:99:57:
49:71:36:eb:bb:b3:8f:4e:03:b0:ca:65:60:76:75:
be:86:fa:7a:9d:fe:3d:b7:65:b1:1b:e8:05:9b:c4:
c2:3a:41:b2:c6:4d:75:00:a0:58:3f:e8:30:27:2b:
22:5d:39:43:1e:0e:19:b4:4e:35:ab:b6:fc:02:2d:
50:2e:de:fc:fa:27:de:31:ca:cc:5c:1e:32:59:19:
99:a5:ef:a5:6e:b7:41:5a:3b:1d:b9:57:61:af:c9:
90:e8:4d:d0:d4:fa:44:e1:18:26:87:0d:53:68:3b:
59:01:33:12:82:0a:34:f0:98:10:ed:54:d0:f6:23:
18:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:95:3B:A0:D0:9E:DE:90:4E:B4:04:D1:86:A6:60:70:06:A9:E3:38
X509v3 Authority Key Identifier:
keyid:E4:C2:C6:B3:DC:8A:DA:E1:96:FF:70:A0:C7:73:99:00:1F:5A:74:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4C2C6B3DC8ADAE196FF70A0C77399001F5A7400.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DoD4z1kQKFrC9mdikXVnSLkmvcBZ3umn9L3fgQCpfRPw/0/34352e3233362e37342e302f32332d3234203d3e20323731343738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.236.74.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:8b:90:4c:ae:7a:04:40:7d:df:db:5e:2e:72:d5:09:a2:94:
f4:0a:73:04:26:3a:15:da:74:c3:65:9b:1b:6b:75:c4:57:0d:
d9:3c:1c:e4:dc:7a:70:2d:63:f7:a5:ca:30:65:eb:cf:23:e1:
99:04:4e:11:2b:92:d6:61:25:26:8b:34:f9:6f:99:d1:f8:67:
04:41:6e:75:2a:4c:68:91:a1:a8:91:c6:73:af:72:37:af:46:
5e:d7:72:7a:af:2c:ac:59:ea:9e:0f:4e:9a:5f:3e:1d:f3:c7:
eb:83:10:76:c1:06:25:ff:65:d8:82:37:01:08:49:67:be:43:
18:a4:c5:df:06:7c:4c:44:03:9c:e0:7c:ff:45:4e:c3:a1:3c:
37:ee:22:90:43:3d:b4:47:96:fb:fa:6b:a9:57:7c:9f:0b:2e:
37:f5:12:e1:56:f7:72:97:3b:8f:e5:32:5e:c0:ca:88:fd:7a:
d8:96:6e:a2:40:02:ef:0e:89:9e:5d:65:fb:ca:39:8f:fb:0f:
6e:89:89:1a:08:3c:ce:3a:ee:b8:ac:96:21:63:ed:f9:20:60:
1b:e3:4d:39:45:58:0a:f1:02:62:36:58:4e:96:82:4a:e8:87:
4c:98:91:c2:34:a3:08:1f:5d:a8:96:d5:40:8a:9f:b6:64:4a:
77:88:ec:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:50:12 2025 by rpki-client